
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/323830333a313734303a3a2f33322d3332203d3e203336353131.roa
File: 323830333a313734303a3a2f33322d3332203d3e203336353131.roa (raw, json)
Hash identifier: 2hcmBdpNMTyqUqgAFLvlLeW20CYV7j3TteLNyeijuHM=
Subject key identifier: F0:37:B3:8B:64:2C:18:73:AC:4A:28:E6:F8:63:34:51:A2:02:40:1B
Certificate issuer: /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial: 3F728DFFA8DD007759467FEE2B320A6353EB6A1A
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/323830333a313734303a3a2f33322d3332203d3e203336353131.roa
Signing time: Tue 01 Apr 2025 20:13:37 +0000
ROA not before: Tue 01 Apr 2025 20:08:37 +0000
ROA not after: Tue 31 Mar 2026 20:13:37 +0000
asID: 36511
IP address blocks: 2803:1740::/32 maxlen: 32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 00:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:72:8d:ff:a8:dd:00:77:59:46:7f:ee:2b:32:0a:63:53:eb:6a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Validity
Not Before: Apr 1 20:08:37 2025 GMT
Not After : Mar 31 20:13:37 2026 GMT
Subject: CN=F037B38B642C1873AC4A28E6F8633451A202401B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:92:a0:bd:c7:09:88:26:6f:8c:65:6d:f9:
5d:0b:50:a1:42:46:a0:e8:ad:d2:40:6b:15:f1:f5:
45:f7:db:c6:ae:41:dc:bb:bd:49:54:2c:fd:02:34:
c4:00:52:46:98:29:a8:bd:c9:eb:c0:60:23:3e:76:
58:18:88:fa:2f:f0:4b:20:fb:27:4e:c0:88:f2:80:
c8:cb:e1:c4:6c:96:4b:8a:7a:8b:5d:03:ab:f9:73:
23:b7:7e:08:d2:34:2c:8b:54:aa:9d:a0:82:3a:b7:
d8:b9:d8:57:95:b4:e0:5a:f3:a2:87:5b:bd:8c:f4:
f0:cb:9d:77:26:41:49:41:47:b9:c3:2b:55:fa:19:
43:83:ab:58:21:a1:bf:a3:ff:0b:00:d5:f3:fe:74:
ce:fe:03:41:4c:5c:70:c4:d0:73:75:28:88:5b:53:
bc:fa:77:df:67:fa:17:69:70:ca:d6:1a:e6:32:61:
44:07:f5:d6:d3:e1:31:38:1e:65:11:5b:9b:38:9a:
c8:4f:ba:b6:4b:86:99:51:bc:14:bb:0b:cc:fd:0a:
c3:6d:24:d0:10:10:72:cd:ca:7e:72:2e:8b:3f:61:
52:ca:31:c8:26:28:94:11:f7:af:19:fc:59:5e:73:
cd:f0:89:5a:e2:27:a3:50:7c:15:63:b2:c1:17:21:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:37:B3:8B:64:2C:18:73:AC:4A:28:E6:F8:63:34:51:A2:02:40:1B
X509v3 Authority Key Identifier:
keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/323830333a313734303a3a2f33322d3332203d3e203336353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1740::/32
Signature Algorithm: sha256WithRSAEncryption
83:f2:a9:f7:4f:67:86:d8:25:3a:9c:79:72:12:3c:af:5c:2c:
6a:58:20:30:17:61:8d:1d:60:af:7c:3e:02:c5:c0:72:85:5d:
ee:48:f4:9d:08:d5:15:24:8c:a4:fd:6d:34:8c:b4:cd:fc:39:
46:e8:f7:ee:3f:51:9a:0a:56:9e:1c:7d:86:0b:ff:45:06:05:
23:78:2c:80:b9:47:d7:b3:2f:d9:3e:66:30:e8:61:50:47:49:
50:4c:ce:a4:df:31:d7:8b:21:d1:2c:d9:a3:e4:8c:18:05:bc:
3e:4a:c6:de:98:6c:f5:50:bc:ad:97:ac:8d:b8:80:c8:1f:4d:
95:10:22:f9:ba:a8:5e:5f:55:05:5c:33:f6:2e:43:ff:78:88:
69:bd:53:fb:a1:5b:f6:cc:6e:81:6f:80:a2:04:97:32:91:73:
a3:05:b6:50:b1:b0:0e:df:c9:63:f0:15:3c:db:bc:33:74:68:
d6:0b:80:0b:f7:84:3a:25:5f:2e:f4:10:7e:6c:0a:cc:3f:10:
73:24:90:ed:30:b2:67:d8:76:a5:df:78:2a:9f:e9:81:de:f5:
0c:51:49:25:38:fe:94:b1:db:ee:16:a9:8b:49:b5:45:d1:b5:
4e:5b:30:f5:3e:c8:fe:42:4b:72:e0:ee:5c:e0:4b:4a:e0:4f:
e6:ca:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:26:23 2025 by rpki-client